Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d93142e-5f04-3b7b-b667-a98226d4bd79.roa
File:                     5d93142e-5f04-3b7b-b667-a98226d4bd79.roa (raw, json)
Hash identifier:          B5KNO8+kq2OwOqCrbE0Fpkv1bJBIp82VDD/KkUrbom4=
Subject key identifier:   AA:99:D8:E5:ED:18:34:B8:4A:A4:FA:E2:B6:01:2E:CC:77:F9:7F:D5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E885A558D932BEAC9BB77F8A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d93142e-5f04-3b7b-b667-a98226d4bd79.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     396561
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:55:8d:93:2b:ea:c9:bb:77:f8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=519805b1-8d8d-4975-b13e-4e83277faed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5f:db:18:63:64:92:a2:4e:36:64:5b:91:64:
                    83:9b:66:8b:87:dc:47:cd:7b:98:e9:c4:b1:48:33:
                    9a:3a:4f:d7:aa:26:d8:f9:b4:11:23:c6:ba:18:e0:
                    de:24:0b:cb:11:9c:a0:54:30:8e:9f:e5:bd:52:f7:
                    19:07:40:29:9e:7b:cb:68:67:9e:6f:58:0d:92:d7:
                    e1:4c:88:36:92:b5:76:48:fd:11:f1:d1:79:44:58:
                    48:e1:62:e2:65:f0:c6:c4:43:a7:fd:66:5d:4b:63:
                    55:60:8c:8d:5f:14:03:41:3a:0d:67:08:2e:e1:01:
                    5b:8b:10:a4:ba:18:8e:8b:7d:ac:bc:ef:ad:6d:1f:
                    41:fd:45:72:47:15:ef:da:70:79:74:fe:8f:79:d9:
                    cf:3b:e2:09:7e:aa:b7:0a:4e:02:b2:33:8e:c6:fe:
                    29:b8:7e:ab:8c:6f:b7:fc:aa:3d:5f:32:10:57:78:
                    2d:cf:05:ac:3c:bc:e1:84:c1:f4:9a:42:13:d6:95:
                    cb:09:e5:cb:d9:53:ad:44:00:77:e7:0d:f1:02:bf:
                    e7:da:44:43:ad:e2:a5:5e:e1:bd:c4:aa:72:79:40:
                    b9:f9:64:d9:71:75:77:38:18:f7:3c:21:c3:30:0e:
                    42:34:01:7f:fc:d1:2a:83:7b:15:47:54:eb:21:29:
                    29:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:99:D8:E5:ED:18:34:B8:4A:A4:FA:E2:B6:01:2E:CC:77:F9:7F:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d93142e-5f04-3b7b-b667-a98226d4bd79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:28:f5:d4:d3:cf:28:63:a4:20:69:89:0f:1d:f4:99:bc:70:
         c9:64:7c:ba:03:29:45:6e:eb:7b:30:7b:ad:b3:6e:50:9a:fe:
         73:85:f4:87:8c:d8:61:4a:ef:19:08:71:d0:1e:0d:5f:27:a5:
         d3:9f:ba:c9:7c:6b:95:a5:35:f9:02:aa:bd:60:55:03:72:89:
         45:2c:c5:c9:c5:b9:51:92:3c:de:2a:a6:ec:1c:f9:ce:45:b5:
         39:7e:32:5e:2f:89:60:51:a7:98:31:d8:9c:01:2f:b3:66:8d:
         d5:fb:05:84:64:d0:20:a7:c4:0c:e4:a8:4b:0c:43:15:2c:b0:
         93:f8:57:2f:c1:d7:61:3e:08:41:7e:b0:af:d9:83:0a:c2:21:
         72:55:e0:71:d4:9e:e0:9b:5b:dd:fb:0c:e6:9d:0e:46:0c:16:
         90:1b:7c:17:70:dc:2d:47:d1:71:e0:f5:8e:64:5e:b7:2b:3c:
         38:c5:c2:82:f4:bf:82:ce:43:c8:81:03:65:28:85:5c:a6:31:
         b9:bc:2b:70:35:b9:66:13:43:b7:e8:67:1a:1c:9b:fd:9d:5b:
         78:82:3f:39:67:d9:95:55:5d:9f:fb:90:89:92:43:b7:16:8c:
         9b:b6:24:6f:cf:80:a9:b5:f2:b7:4c:e2:09:6e:af:85:b6:4b:
         a9:27:b7:6f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6IWlWNkyvqybt3+KAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk
NTE5ODA1YjEtOGQ4ZC00OTc1LWIxM2UtNGU4MzI3N2ZhZWQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2l/bGGNkkqJONmRbkWSDm2aLh9xHzXuY6cSx
SDOaOk/XqibY+bQRI8a6GODeJAvLEZygVDCOn+W9UvcZB0ApnnvLaGeeb1gNktfh
TIg2krV2SP0R8dF5RFhI4WLiZfDGxEOn/WZdS2NVYIyNXxQDQToNZwgu4QFbixCk
uhiOi32svO+tbR9B/UVyRxXv2nB5dP6PednPO+IJfqq3Ck4CsjOOxv4puH6rjG+3
/Ko9XzIQV3gtzwWsPLzhhMH0mkIT1pXLCeXL2VOtRAB35w3xAr/n2kRDreKlXuG9
xKpyeUC5+WTZcXV3OBj3PCHDMA5CNAF//NEqg3sVR1TrISkpPwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKqZ2OXtGDS4SqT64rYBLsx3+X/VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWQ5MzE0MmUtNWYwNC0z
YjdiLWI2NjctYTk4MjI2ZDRiZDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQASKPXU088oY6QgaYkPHfSZvHDJZHy6AylFbut7MHuts25Qmv5zhfSH
jNhhSu8ZCHHQHg1fJ6XTn7rJfGuVpTX5Aqq9YFUDcolFLMXJxblRkjzeKqbsHPnO
RbU5fjJeL4lgUaeYMdicAS+zZo3V+wWEZNAgp8QM5KhLDEMVLLCT+FcvwddhPghB
frCv2YMKwiFyVeBx1J7gm1vd+wzmnQ5GDBaQG3wXcNwtR9Fx4PWOZF63Kzw4xcKC
9L+CzkPIgQNlKIVcpjG5vCtwNblmE0O36GcaHJv9nVt4gj85Z9mVVV2f+5CJkkO3
FoybtiRvz4CptfK3TOIJbq+FtkupJ7dv
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:43:37 2026 by rpki-client